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Amendment Accompanying RCE Request/Reply to Office Action of October 25, 2004 
Amendments to Specification: 

In the Specification: 

Amend the following paragraphs of the specification, as follows: 

Page 4, second full paragraph: 

However, som e smaller computer n e tworks/systems currently gen e rat e , on average, 
750,000 events per day. During p e ak times such systems may generate over 1,000,000 events in 
one hour. More complicated systems, however, generate approximately 3,000,000 events per 
hour, on average. Peaks of well ov e r 20,000,000 events per hour arc not uncommon for such 
complicat e d systems. Therefore, human analysis of this huge amount of events is not possible, 
and Therefore, there exists a need for a self-diagnosing network security system that can protect 
a target network from both internal and external intruders and that is resistant to attacks 
perpetrated on the system it has been deployed to protect. Furthermore, there is a need for an 
active security system that will take measured action against perceived security threats even in 
the absence of a human network manager. 

Page 8, first full paragraph: 

Preferably, the security system defined herein is embedded as a software package and 
implemented on computers comprising at least a master system and the security subsystem. The 
security subsystem and ma s ter system are able to accept and correlate events from a plurality of 
d e vic e s without any human control. 
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